Description
A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-231510 is the identifier assigned to this vulnerability.
References (3)
Scores
CVSS v3
3.5
EPSS
0.0015
EPSS Percentile
35.6%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-24
Status
published
Products (1)
otcms/otcms
< 6.62
Published
Jun 14, 2023
Tracked Since
Feb 18, 2026